Path: ...!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: Physfitfreak <physfitfreak@gmail.com>
Newsgroups: comp.os.linux.advocacy,sci.physics.relativity,sci.physics
Subject: Re: Please List Your Open Ports
Date: Mon, 17 Mar 2025 16:06:33 -0500
Organization: Modern Human
Message-ID: <vra2sp$21kq$1@solani.org>
References: <pan$98f5f$d61a8c9$9aa88326$ea218693@linux.rocks>
 <vr76h7$2bde5$1@dont-email.me>
 <pan$46871$67579cb1$5784d130$83cc267d@linux.rocks> <vr7jt7$u90$2@solani.org>
 <182d90d4ed38e644$26628$19313$802601b3@news.usenetexpress.com>
 <vr9pji$lv2o$1@dont-email.me> <vr9pvj$1u7s$1@solani.org>
 <pan$4e8$4d696b10$4b4e7f71$ac9f14e9@linux.rocks>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 17 Mar 2025 21:06:33 -0000 (UTC)
Injection-Info: solani.org;
	logging-data="67226"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:FBPWoBEWlG1QOBIOg4NcRjih4Ko=
X-User-ID: eJwFwQkBwDAIA0BLfKFMTgvEv4TdwVOzTyQyQLBKdnQpUWWzTOnraa2gBnVtzRtuvhcaJ8s5t+y9kTffqR9S2RWN
Content-Language: en-US, fa-IR
In-Reply-To: <pan$4e8$4d696b10$4b4e7f71$ac9f14e9@linux.rocks>
Bytes: 4308
Lines: 70

On 3/17/25 2:09 PM, Farley Flud wrote:
> On Mon, 17 Mar 2025 13:34:27 -0500, Physfitfreak wrote:
> 
>>
>> Running tcpdump gives me this error:
>>
>>        tcpdump: eno1: You don't have permission to capture on that device
>>
> 
> You must execute tcpdump as the root user.
> 
> On my machine I am always the root user, but the stupid distros have their
> own ridiculous security philosophy.  I believe that their asinine command
> workaround is this:
> 
> sudo tcpdump
> 
> Also, read the tcpdump man page or search for tcpdump web pages.
> There is a LOT that the command can do.
> 
> 
> 
> 
> 

Ok, I ran it and had it write the result (a large file) to a file. 
Checking the file, I could not understand any of the output which were 
in chronological order. I spotted a few "Amazon" words, so I thought 
perhaps most of the file is about cookies activities, etc. So I ran the 
bleachbit to clear cookies up.

Then I ran tcpdump again and wrote output in a file. The file looks the 
same having stuff like: (part of the entry for second 20 of 3:51 pm today)

15:51:20.751730 IP6 _gateway > hydrogen-OptiPlex-7050: ICMP6, neighbor 
solicitation, who has hydrogen-OptiPlex-7050, length 32
15:51:20.751816 IP6 hydrogen-OptiPlex-7050 > _gateway: ICMP6, neighbor 
advertisement, tgt is hydrogen-OptiPlex-7050, length 24
15:51:20.767810 IP6 _gateway > hydrogen-OptiPlex-7050: ICMP6, neighbor 
solicitation, who has hydrogen-OptiPlex-7050, length 32
15:51:20.767897 IP6 hydrogen-OptiPlex-7050 > _gateway: ICMP6, neighbor 
advertisement, tgt is hydrogen-OptiPlex-7050, length 24
15:51:20.799787 IP6 _gateway > hydrogen-OptiPlex-7050: ICMP6, neighbor 
solicitation, who has hydrogen-OptiPlex-7050, length 32
15:51:20.799872 IP6 hydrogen-OptiPlex-7050 > _gateway: ICMP6, neighbor 
advertisement, tgt is hydrogen-OptiPlex-7050, length 24
15:51:20.806917 IP6 hydrogen-OptiPlex-7050 > homeportal: ICMP6, neighbor 
solicitation, who has homeportal, length 32
15:51:20.806977 IP6 hydrogen-OptiPlex-7050 > _gateway: ICMP6, neighbor 
solicitation, who has _gateway, length 32
15:51:20.807765 IP6 homeportal > hydrogen-OptiPlex-7050: ICMP6, neighbor 
advertisement, tgt is homeportal, length 24
15:51:20.808234 IP6 _gateway > hydrogen-OptiPlex-7050: ICMP6, neighbor 
advertisement, tgt is _gateway, length 24
15:51:20.854022 e0:22:04:56:89:3b (oui Unknown) > Broadcast, ethertype 
Unknown (0x7373), length 121:
	0x0000:  1211 0000 0043 1fb2 05dd f137 e122 3905  .....C.....7."9.
	0x0010:  ef58 d67c 1e40 a4ae bb60 6ad8 2f7d eecd  .X.|.@...`j./}..
	0x0020:  43c3 ac98 e8a4 0000 0201 8003 06e0 2204  C.............".
	0x0030:  5689 3b04 0104 0701 011b 0100 0806 e022  V.;............"
	0x0040:  0456 893b 0901 020e 1800 0000 0000 0000  .V.;............
	0x0050:  0000 0000 0000 0000 0000 0000 0000 0000  ................
	0x0060:  0019 0889 caa5 4969 ebf2 04              ......Ii...

If you can make sense of it you're welcome to comment :)